GGevitys
Sign in
Legal

Privacy Policy

We built Gevitys to help you explore Bali with confidence. This policy explains what data we collect, why we collect it, and the choices you have.

Last updated: August 30, 2026

This Privacy Policy explains how PT. LONGEVITY PARTNER GROUP ("PT. LONGEVITY PARTNER GROUP", "we", "us" or "our"), the operator of the Gevitys platform (the "Platform"), collects, uses and protects your personal data when you use our website, mobile experience and related services.

1. Information we collect

  • Account data — name, email, phone, avatar and password (hashed).
  • Booking data — reservations, guest counts, dates, special requests and preferences.
  • Payment data — processed by our PCI-compliant payment partners (including Xendit and Stripe); we never store full card numbers on our systems.
  • AI interactions — the questions you ask Gevitys AI, so we can improve responses and save chats you choose to keep.
  • Device & usage data — device type, language, and interactions with the app to improve performance.

2. How we use your data

  • To create bookings, process payments, and communicate with hosts on your behalf.
  • To personalise recommendations from our AI assistant.
  • To send transactional messages (confirmations, receipts, updates).
  • To keep the Platform safe from fraud and abuse.
  • To comply with legal obligations in Indonesia and your country of residence.

3. Sharing with businesses

When you book a villa, service or event, PT. LONGEVITY PARTNER GROUP shares the minimum information the host needs to serve you — typically your name, contact details and booking specifics. Hosts are contractually bound to protect your data.

4. AI usage

Questions asked to Gevitys AI may be processed by third-party model providers under strict data-processing agreements. We do not use your personal data to train public foundation models. You can delete any saved AI chat from your profile at any time.

5. Cookies and similar technologies

We use cookies and similar technologies to operate and improve the Platform. The main categories are:

  • Essential cookies — required for core functionality such as signing in, keeping your session active, remembering items in your cart and processing payments securely. The Platform will not work correctly without these.
  • Analytics cookies — help us understand how visitors use Gevitys (pages viewed, features used, errors encountered) so we can improve performance and reliability. These are used in aggregated form.
  • Preference cookies — remember your choices such as language, currency and display settings so you don't have to set them on every visit.

You can control or delete cookies at any time through your browser settings. Most browsers let you block all cookies, block third-party cookies only, or delete existing cookies. Please note that blocking essential cookies may prevent parts of the Platform (including bookings and payments) from working correctly.

6. International data transfers

PT. LONGEVITY PARTNER GROUP is based in Indonesia, but some of the service providers we rely on — including cloud hosting, payment processing (such as Xendit and Stripe), email delivery and AI model providers — may process your personal data outside Indonesia, including in the European Union, the United States and other jurisdictions.

Whenever we transfer personal data internationally, we use appropriate safeguards to protect it, such as working with providers that are certified under recognised international frameworks, entering into data-processing agreements with standard contractual clauses, and applying encryption in transit and at rest.

7. Your rights

  • Access, correct or delete your personal data.
  • Export your data in a portable format.
  • Withdraw consent for marketing at any time.
  • Lodge a complaint with your local data-protection authority.

8. Data retention

We keep booking records for up to 7 years to comply with Indonesian tax and consumer-protection law. Account data is deleted within 30 days of your request, unless we're required to retain it for legal or regulatory reasons.

9. Security

All traffic is encrypted with TLS. Sensitive fields are encrypted at rest. Access is role-based and audited.

10. Contact

Questions about your privacy or requests to exercise your rights can be sent to PT. LONGEVITY PARTNER GROUP at PTlongevitygroup@gmail.com (monitored inbox).